{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T09:34:40Z","timestamp":1771925680700,"version":"3.50.1"},"reference-count":57,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T00:00:00Z","timestamp":1771891200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T00:00:00Z","timestamp":1771891200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cybersecurity"],"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>Deep learning (DL)-based object detection is a core technology that is widely applied in various industrial fields, including surveillance, autonomous driving, and others. However, it is well-known that DL-based systems are vulnerable to adversarial attacks. In particular, backdoor attacks are insidious methods that can covertly manipulate the normal operation of DL systems according to the attacker\u2019s intentions. These attacks are conducted by stealthily inserting backdoor triggers into a subset of training data, thereby embedding a backdoor into the DL model trained on the poisoned dataset. As a result, the backdoored DL model behaves normally for clean inputs but misclassifies malicious inputs containing the trigger into a specific target class. According to our extensive survey on backdoor attacks, there has been limited research on backdoor attacks targeting DL-based object detection models, and no prior studies have explored the impact of the backdoor trigger\u2019s position. Notably, existing methods overlook the significance of trigger placement, typically inserting triggers at arbitrarily fixed positions within the image. Motivated by this gap, our study presents a novel backdoor attack method that markedly improves the attack success rate by identifying the optimal trigger position. Specifically, we design and implement a Backdoor Trigger Position Search Algorithm (BTPSA) that targets DL-based object detection systems. Our experiments demonstrate that backdoor attacks using BTPSA substantially outperform existing methods that insert triggers at fixed or random positions, achieving up to 82.5% points improvement and 30.6% points improvement on average in attack success rate (ASR).<\/jats:p>","DOI":"10.1186\/s42400-025-00477-z","type":"journal-article","created":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T08:47:39Z","timestamp":1771922859000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An enhanced backdoor attack using a backdoor trigger position searching algorithm for avoiding deep learning-based object detection systems"],"prefix":"10.1186","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-3763-9691","authenticated-orcid":false,"given":"Sinho","family":"Jo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1274-6291","authenticated-orcid":false,"given":"Youngho","family":"Cho","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,2,24]]},"reference":[{"key":"477_CR1","doi-asserted-by":"crossref","unstructured":"Borgnia E, Cherepanova V, Fowl L, Ghiasi A, Geiping J, Goldblum M, Goldstein T, Gupta A (2021) Strong data augmentation sanitizes poisoning and backdoor attacks without an accuracy tradeoff. In: ICASSP 2021\u20132021 IEEE international conference on acoustics, speech and signal processing (ICASSP). IEEE, pp 3855\u20133859","DOI":"10.1109\/ICASSP39728.2021.9414862"},{"key":"477_CR2","doi-asserted-by":"crossref","unstructured":"Chan S-H, Dong Y, Zhu J, Zhang X, Zhou J (2023) BadDet: Backdoor attacks on\u00a0object detection. In: Computer vision \u2013 ECCV 2022 workshops. ECCV 2022. pp 396\u2013412","DOI":"10.1007\/978-3-031-25056-9_26"},{"key":"477_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2021.116306","volume":"191","author":"R Chandrakar","year":"2022","unstructured":"Chandrakar R, Raja R, Miri R, Sinha U, Kumar Singh Kushwaha A, Raja H (2022) Enhanced the moving object detection and object tracking for traffic surveillance using RBF-FDLNN and CBF algorithm. Expert Syst Appl 191:116306. https:\/\/doi.org\/10.1016\/j.eswa.2021.116306","journal-title":"Expert Syst Appl"},{"key":"477_CR6","doi-asserted-by":"publisher","first-page":"111","DOI":"10.1016\/j.future.2023.09.030","volume":"151","author":"M Chen","year":"2024","unstructured":"Chen M, Sun J, Aida K, Takefusa A (2024) Weather-aware object detection method for maritime surveillance systems. Future Gener Comput Syst 151:111\u2013123. https:\/\/doi.org\/10.1016\/j.future.2023.09.030","journal-title":"Future Gener Comput Syst"},{"key":"477_CR7","unstructured":"Chen X, Liu C, Li B, Lu K, Song D (2017) Targeted backdoor attacks on deep learning systems using data poisoning"},{"key":"477_CR8","doi-asserted-by":"crossref","unstructured":"Chen X, Salem A, Chen D, Backes M, Ma S, Shen Q, Wu Z, Zhang Y (2021) BadNL: Backdoor attacks against NLP models with semantic-preserving improvements. In: Annual computer security applications conference. ACM, New York, pp 554\u2013569","DOI":"10.1145\/3485832.3485837"},{"key":"477_CR9","doi-asserted-by":"crossref","unstructured":"Chen JX, Wang J, Lu H (2021) Ship detection in complex weather based on CNN. In: 2021 IEEE 6th international conference on intelligent computing and signal processing, ICSP 2021. Institute of Electrical and Electronics Engineers Inc., pp 1225\u20131228","DOI":"10.1109\/ICSP51882.2021.9408842"},{"key":"477_CR10","doi-asserted-by":"publisher","first-page":"594","DOI":"10.1016\/j.ins.2022.08.123","volume":"612","author":"L Feng","year":"2022","unstructured":"Feng L, Li S, Qian Z, Zhang X (2022) Robust backdoor injection with the capability of resisting network transfer. Inf Sci (n y) 612:594\u2013611. https:\/\/doi.org\/10.1016\/j.ins.2022.08.123","journal-title":"Inf Sci (n y)"},{"key":"477_CR11","doi-asserted-by":"publisher","first-page":"1234","DOI":"10.1109\/TIP.2025.3539466","volume":"34","author":"Y Feng","year":"2025","unstructured":"Feng Y, Ma B, Liu D, Zhang Y, Cai W, Xia Y (2025) Contrastive neuron pruning for backdoor defense. IEEE Trans Image Process 34:1234\u20131245. https:\/\/doi.org\/10.1109\/TIP.2025.3539466","journal-title":"IEEE Trans Image Process"},{"key":"477_CR12","doi-asserted-by":"crossref","unstructured":"Fu Y, Zhao Y, Yu Q, Li C, Lin Y (2021) 2-in-1 Accelerator: enabling random precision switch for winning both adversarial robustness and efficiency. In: MICRO-54: 54th annual IEEE\/ACM international symposium on microarchitecture. ACM, New York, pp 225\u2013237","DOI":"10.1145\/3466752.3480082"},{"key":"477_CR13","doi-asserted-by":"publisher","first-page":"176","DOI":"10.1109\/MCOM.012.2200596","volume":"61","author":"Y Ge","year":"2023","unstructured":"Ge Y, Wang Q, Yu J, Shen C, Li Q (2023) Data poisoning and backdoor attacks on audio intelligence systems. IEEE Commun Mag 61:176\u2013182. https:\/\/doi.org\/10.1109\/MCOM.012.2200596","journal-title":"IEEE Commun Mag"},{"key":"477_CR14","doi-asserted-by":"crossref","unstructured":"Girshick R, Donahue J, Darrell T, Malik J (2014) Rich feature hierarchies for accurate object detection and semantic segmentation. In: 2014 IEEE conference on computer vision and pattern recognition. IEEE, pp 580\u2013587","DOI":"10.1109\/CVPR.2014.81"},{"key":"477_CR15","doi-asserted-by":"crossref","unstructured":"Girshick R (2015) Fast R-CNN. In: 2015 IEEE International conference on computer vision (ICCV). IEEE, pp 1440\u20131448","DOI":"10.1109\/ICCV.2015.169"},{"key":"477_CR16","doi-asserted-by":"publisher","first-page":"1563","DOI":"10.1109\/TPAMI.2022.3162397","volume":"45","author":"M Goldblum","year":"2023","unstructured":"Goldblum M, Tsipras D, Xie C, Chen X, Schwarzschild A, Song D, Madry A, Li B, Goldstein T (2023) Dataset security for machine learning: data poisoning, backdoor attacks, and defenses. IEEE Trans Pattern Anal Mach Intell 45:1563\u20131580. https:\/\/doi.org\/10.1109\/TPAMI.2022.3162397","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"477_CR17","doi-asserted-by":"publisher","first-page":"4993","DOI":"10.1109\/TDSC.2023.3239225","volume":"20","author":"X Gong","year":"2023","unstructured":"Gong X, Wang Z, Chen Y, Xue M, Wang Q, Shen C (2023) Kaleidoscope: physical backdoor attacks against deep neural networks with RGB filters. IEEE Trans Dependable Secure Comput 20:4993\u20135004. https:\/\/doi.org\/10.1109\/TDSC.2023.3239225","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"477_CR18","doi-asserted-by":"publisher","first-page":"47230","DOI":"10.1109\/ACCESS.2019.2909068","volume":"7","author":"T Gu","year":"2019","unstructured":"Gu T, Liu K, Dolan-Gavitt B, Garg S (2019) Badnets: evaluating backdooring attacks on deep neural networks. IEEE Access 7:47230\u201347244. https:\/\/doi.org\/10.1109\/ACCESS.2019.2909068","journal-title":"IEEE Access"},{"key":"477_CR19","doi-asserted-by":"publisher","DOI":"10.1109\/OJSP.2022.3190213","author":"W Guo","year":"2022","unstructured":"Guo W, Tondi B, Barni M (2022) An overview of backdoor attacks against deep neural networks and possible defences. IEEE Open J Signal Process. https:\/\/doi.org\/10.1109\/OJSP.2022.3190213","journal-title":"IEEE Open J Signal Process"},{"key":"477_CR20","doi-asserted-by":"crossref","unstructured":"Han X, Xu G, Zhou Y, Yang X, Li J, Zhang T (2022) Physical backdoor attacks to lane detection systems in autonomous driving. In: Proceedings of the 30th ACM international conference on multimedia. ACM, New York, pp 2957\u20132968","DOI":"10.1145\/3503161.3548171"},{"key":"477_CR21","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/1520872","author":"Z Huang","year":"2020","unstructured":"Huang Z, Sui B, Wen J, Jiang G (2020) An intelligent ship image\/video detection and classification method with improved regressive deep convolutional neural network. Complexity. https:\/\/doi.org\/10.1155\/2020\/1520872","journal-title":"Complexity"},{"key":"477_CR22","doi-asserted-by":"publisher","DOI":"10.3390\/rs15174319","author":"J Jian","year":"2023","unstructured":"Jian J, Liu L, Zhang Y, Xu K, Yang J (2023) Optical remote sensing ship recognition and classification based on improved YOLOv5. Remote Sens. https:\/\/doi.org\/10.3390\/rs15174319","journal-title":"Remote Sens"},{"key":"477_CR23","unstructured":"Jocher.Glenn (2023): Ultralytics YOLO, https:\/\/github.com\/ultralytics\/ultralytics"},{"key":"477_CR24","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/4907754","author":"Z Kong","year":"2021","unstructured":"Kong Z, Xue J, Wang Y, Huang L, Niu Z, Li F (2021) A survey on adversarial attack in the age of artificial intelligence. Wirel Commun Mob Comput. https:\/\/doi.org\/10.1155\/2021\/4907754","journal-title":"Wirel Commun Mob Comput"},{"key":"477_CR25","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2020.3021407","author":"S Li","year":"2020","unstructured":"Li S, Xue M, Zhao B, Zhu H, Zhang X (2020) Invisible backdoor attacks on deep neural networks via steganography and regularization. IEEE Trans Dependable Secure Comput. https:\/\/doi.org\/10.1109\/tdsc.2020.3021407","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"477_CR26","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/TNNLS.2022.3182979","volume":"35","author":"Y Li","year":"2024","unstructured":"Li Y, Jiang Y, Li Z, Xia ST (2024) Backdoor learning: a survey. IEEE Trans Neural Netw Learn Syst 35:5\u201322. https:\/\/doi.org\/10.1109\/TNNLS.2022.3182979","journal-title":"IEEE Trans Neural Netw Learn Syst"},{"key":"477_CR27","unstructured":"Li Y, Li Y, Lv Y, Jiang Y, Xia S-T (2021) Hidden backdoor attack against semantic segmentation models"},{"key":"477_CR28","doi-asserted-by":"publisher","first-page":"4738","DOI":"10.1109\/JSTARS.2020.3017676","volume":"13","author":"K Liu","year":"2020","unstructured":"Liu K, Yu S, Liu S (2020b) An improved InceptionV3 network for obscured ship classification in remote sensing images. IEEE J Sel Top Appl Earth Obs Remote Sens 13:4738\u20134747. https:\/\/doi.org\/10.1109\/JSTARS.2020.3017676","journal-title":"IEEE J Sel Top Appl Earth Obs Remote Sens"},{"key":"477_CR29","doi-asserted-by":"crossref","unstructured":"Liu W, Anguelov D, Erhan D, Szegedy C, Reed S, Fu C-Y, Berg AC (2016) SSD: single shot multibox detector. Presented at the","DOI":"10.1007\/978-3-319-46448-0_2"},{"key":"477_CR30","doi-asserted-by":"crossref","unstructured":"Liu K, Dolan-Gavitt B, Garg S (2018) Fine-Pruning: defending against backdooring attacks on deep neural networks. Presented at the","DOI":"10.1007\/978-3-030-00470-5_13"},{"key":"477_CR31","doi-asserted-by":"crossref","unstructured":"Liu Y, Ma X, Bailey J, Lu F (2020) Reflection backdoor: a natural backdoor attack on deep neural networks. Presented at the","DOI":"10.1007\/978-3-030-58607-2_11"},{"key":"477_CR32","unstructured":"Luo N, Li Y, Wang Y, Wu S, Tan Y, Zhang Q (2022) Enhancing clean label backdoor attack with two-phase specific triggers"},{"key":"477_CR33","doi-asserted-by":"crossref","unstructured":"Ma H, Li Y, Gao Y, Zhang Z, Abuadbba A, Fu A, Al-Sarawi SF, Surya N, Abbott D (2022) TransCAB: Transferable clean-annotation backdoor to object detection with natural trigger in real-world","DOI":"10.1109\/SRDS60354.2023.00018"},{"key":"477_CR34","unstructured":"Nguyen A, Tran A (2021) WaNet -- Imperceptible warping-based backdoor attack"},{"key":"477_CR35","doi-asserted-by":"crossref","unstructured":"Qiu H, Zeng Y, Guo S, Zhang T, Qiu M, Thuraisingham B (2021) DeepSweep: An evaluation framework for mitigating DNN backdoor attacks using data augmentation. In: Proceedings of the 2021 ACM Asia conference on computer and communications security. ACM, New York, pp 363\u2013377","DOI":"10.1145\/3433210.3453108"},{"key":"477_CR36","doi-asserted-by":"crossref","unstructured":"Quiring E, Rieck K (2020) Backdooring and poisoning neural networks with image-scaling attacks. In: Proceedings - 2020 IEEE symposium on security and privacy workshops, SPW 2020. Institute of Electrical and Electronics Engineers Inc., pp 41\u201347","DOI":"10.1109\/SPW50608.2020.00024"},{"key":"477_CR37","doi-asserted-by":"crossref","unstructured":"Redmon J, Divvala S, Girshick R, Farhadi A (2016) You only look once: unified, real-time object detection","DOI":"10.1109\/CVPR.2016.91"},{"key":"477_CR38","doi-asserted-by":"publisher","first-page":"1137","DOI":"10.1109\/TPAMI.2016.2577031","volume":"39","author":"S Ren","year":"2017","unstructured":"Ren S, He K, Girshick R, Sun J (2017) Faster R-CNN: towards real-time object detection with region proposal networks. IEEE Trans Pattern Anal Mach Intell 39:1137\u20131149. https:\/\/doi.org\/10.1109\/TPAMI.2016.2577031","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"477_CR39","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/electronics9122022","volume":"9","author":"Y Ren","year":"2020","unstructured":"Ren Y, Yang J, Guo Z, Zhang Q, Cao H (2020) Ship classification based on attention mechanism and multi-scale convolutional neural network for visible and infrared images. Electronics (Switzerland) 9:1\u201320. https:\/\/doi.org\/10.3390\/electronics9122022","journal-title":"Electronics (Switzerland)"},{"key":"477_CR40","unstructured":"Shafahi A, Huang WR, Najibi M, Suciu O, Studer C, Dumitras T, Goldstein T (2018) Poison Frogs! Targeted clean-label poisoning attacks on neural networks"},{"key":"477_CR41","doi-asserted-by":"publisher","first-page":"2593","DOI":"10.1109\/TMM.2018.2865686","volume":"20","author":"Z Shao","year":"2018","unstructured":"Shao Z, Wu W, Wang Z, Du W, Li C (2018) Seaships: a large-scale precisely annotated dataset for ship detection. IEEE Trans Multimedia 20:2593\u20132604. https:\/\/doi.org\/10.1109\/TMM.2018.2865686","journal-title":"IEEE Trans Multimedia"},{"key":"477_CR42","doi-asserted-by":"crossref","unstructured":"Siva Kumar RS, Nystrom M, Lambert J, Marshall A, Goertzel M, Comissoneru A, Swann M, Xia S (2020) Adversarial machine learning-industry perspectives. In: Proceedings - 2020 IEEE Symposium on security and privacy workshops, SPW 2020. Institute of Electrical and Electronics Engineers Inc., pp 69\u201375","DOI":"10.1109\/SPW50608.2020.00028"},{"key":"477_CR43","unstructured":"Souri H, Fowl L, Chellappa R, Goldblum M, Goldstein T (2021) Sleeper agent: scalable hidden trigger backdoors for neural networks trained from scratch"},{"key":"477_CR44","doi-asserted-by":"publisher","first-page":"116","DOI":"10.1016\/j.isprsjprs.2021.12.004","volume":"184","author":"X Sun","year":"2022","unstructured":"Sun X, Wang P, Yan Z, Xu F, Wang R, Diao W, Chen J, Li J, Feng Y, Xu T, Weinmann M, Hinz S, Wang C, Fu K (2022) FAIR1M: A benchmark dataset for fine-grained object recognition in high-resolution remote sensing imagery. ISPRS J Photogramm Remote Sens 184:116\u2013130. https:\/\/doi.org\/10.1016\/j.isprsjprs.2021.12.004","journal-title":"ISPRS J Photogramm Remote Sens"},{"key":"477_CR45","doi-asserted-by":"crossref","unstructured":"Tan TJL, Shokri R (2019) Bypassing backdoor detection algorithms in deep learning","DOI":"10.1109\/EuroSP48549.2020.00019"},{"key":"477_CR46","doi-asserted-by":"crossref","unstructured":"Teixeira E, Araujo B, Costa V, Mafra S, Figueiredo F (2022) Literature review on ship localization, classification, and detection methods based on optical sensors and neural networks","DOI":"10.3390\/s22186879"},{"key":"477_CR47","unstructured":"Turner A, Tsipras D, Madry A (2019) Label-consistent backdoor attacks"},{"key":"477_CR48","doi-asserted-by":"publisher","first-page":"1526","DOI":"10.1109\/TSC.2020.3000900","volume":"15","author":"S Wang","year":"2022","unstructured":"Wang S, Nepal S, Rudolph C, Grobler M, Chen S, Chen T (2022b) Backdoor attacks against transfer learning with pre-trained deep learning models. IEEE Trans Serv Comput 15:1526\u20131539. https:\/\/doi.org\/10.1109\/TSC.2020.3000900","journal-title":"IEEE Trans Serv Comput"},{"key":"477_CR49","doi-asserted-by":"crossref","unstructured":"Wang X, Hou R, Zhao B, Yuan F, Zhang J, Meng D, Qian X (2020) DNNGuard: an elastic heterogeneous DNN accelerator architecture against adversarial attacks. In: Proceedings of the 25th international conference on architectural support for programming languages and operating systems. ACM, New York pp 19\u201334","DOI":"10.1145\/3373376.3378532"},{"key":"477_CR50","doi-asserted-by":"crossref","unstructured":"Wang T, Yao Y, Xu F, An S, Tong H, Wang T (2022) An invisible black-box backdoor attack through frequency domain. In: Lecture notes in computer science (including subseries lecture notes in artificial intelligence and lecture notes in bioinformatics). Springer Science and Business Media Deutschland GmbH, pp 396\u2013413","DOI":"10.1007\/978-3-031-19778-9_23"},{"key":"477_CR51","doi-asserted-by":"crossref","unstructured":"Wenger E, Passananti J, Bhagoji N, Yao Y, Zheng H, Zhao BY (2021) Backdoor attacks against deep learning systems in the physical world","DOI":"10.1109\/CVPR46437.2021.00614"},{"key":"477_CR52","doi-asserted-by":"publisher","first-page":"889","DOI":"10.1016\/j.procs.2023.11.117","volume":"228","author":"J Wu","year":"2023","unstructured":"Wu J (2023) Design and exploration of real time monitoring system for power grid operation safety based on YOLO object detection algorithm. Procedia Comput Sci 228:889\u2013897. https:\/\/doi.org\/10.1016\/j.procs.2023.11.117","journal-title":"Procedia Comput Sci"},{"key":"477_CR53","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102726","author":"M Xue","year":"2022","unstructured":"Xue M, He C, Wu Y, Sun S, Zhang Y, Wang J, Liu W (2022) PTB: robust physical backdoor attacks against deep neural networks in real world. Comput Secur. https:\/\/doi.org\/10.1016\/j.cose.2022.102726","journal-title":"Comput Secur"},{"key":"477_CR54","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/5808206","author":"R Zhang","year":"2021","unstructured":"Zhang R, Li S, Ji G, Zhao X, Li J, Pan M (2021b) Survey on deep learning-based marine object detection. J Adv Transp. https:\/\/doi.org\/10.1155\/2021\/5808206","journal-title":"J Adv Transp"},{"key":"477_CR55","doi-asserted-by":"publisher","first-page":"8458","DOI":"10.1109\/JSTARS.2021.3104230","volume":"14","author":"Z Zhang","year":"2021","unstructured":"Zhang Z, Zhang L, Wang Y, Feng P, He R (2021c) Shiprsimagenet: a large-scale fine-grained dataset for ship detection in high-resolution optical remote sensing images. IEEE J Sel Top Appl Earth Obs Remote Sens 14:8458\u20138472. https:\/\/doi.org\/10.1109\/JSTARS.2021.3104230","journal-title":"IEEE J Sel Top Appl Earth Obs Remote Sens"},{"key":"477_CR56","doi-asserted-by":"crossref","unstructured":"Zhang Z, Jia J, Wang B, Gong NZ (2021) Backdoor attacks to graph neural networks. In: Proceedings of the 26th ACM symposium on access control models and technologies. ACM, New York, pp 15\u201326","DOI":"10.1145\/3450569.3463560"},{"key":"477_CR57","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.122836","volume":"242","author":"J Zhao","year":"2024","unstructured":"Zhao J, Zhao W, Deng B, Wang Z, Zhang F, Zheng W, Cao W, Nan J, Lian Y, Burke AF (2024) Autonomous driving system: a comprehensive survey. Expert Syst Appl 242:122836. https:\/\/doi.org\/10.1016\/j.eswa.2023.122836","journal-title":"Expert Syst Appl"},{"key":"477_CR58","doi-asserted-by":"crossref","unstructured":"Zhong H, Liao C, Squicciarini AC, Zhu S, Miller D 2020 Backdoor embedding in convolutional neural network models via invisible perturbation. In: CODASPY 2020 - Proceedings of the 10th ACM conference on data and application security and privacy. Association for Computing Machinery, Inc, pp 97\u2013108","DOI":"10.1145\/3374664.3375751"},{"key":"477_CR59","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1109\/JPROC.2023.3238524","volume":"111","author":"Z Zou","year":"2023","unstructured":"Zou Z, Chen K, Shi Z, Guo Y, Ye J (2023) Object detection in 20 years: a survey. Proc IEEE 111:257\u2013276. https:\/\/doi.org\/10.1109\/JPROC.2023.3238524","journal-title":"Proc IEEE"}],"container-title":["Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-025-00477-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s42400-025-00477-z","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s42400-025-00477-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,2,24]],"date-time":"2026-02-24T08:48:00Z","timestamp":1771922880000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1186\/s42400-025-00477-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,24]]},"references-count":57,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["477"],"URL":"https:\/\/doi.org\/10.1186\/s42400-025-00477-z","relation":{},"ISSN":["2523-3246"],"issn-type":[{"value":"2523-3246","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2,24]]},"assertion":[{"value":"21 April 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"1 September 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 February 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"128"}}